Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File: ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier: vguHfKrP8DipaPYX4s++CPc3WHsPdgJtAcVnSziQ5HI=
Subject key identifier: 0C:D6:0C:11:1B:FA:76:ED:E1:76:E7:4F:FF:86:E5:0D:14:1B:22:56
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer: /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial: 019D28F1F5B787E8A29F58CF0142C7DB3098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number: 13D6
Signing time: Thu 26 Mar 2026 07:00:38 +0000
Manifest this update: Thu 26 Mar 2026 07:00:38 +0000
Manifest next update: Fri 27 Mar 2026 07:00:38 +0000
Files and hashes: 1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: HJUanduJqRcA7PePfJc5um9gckxIl9NEjNOeAeMhceQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f1:f5:b7:87:e8:a2:9f:58:cf:01:42:c7:db:30:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Validity
Not Before: Mar 26 07:00:38 2026 GMT
Not After : Mar 27 07:00:38 2026 GMT
Subject: CN=0cd60c111bfa76ede176e74fff86e50d141b2256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:e0:97:b6:d9:73:73:12:06:ae:26:5d:03:
43:d9:36:10:18:b6:47:ec:56:58:c6:db:ee:1c:9f:
84:e7:bc:74:b2:b7:87:de:1c:e7:1a:88:97:1c:44:
d0:a4:68:e4:da:03:f8:49:f2:14:3d:5b:80:81:b5:
a9:29:62:70:eb:72:f8:8f:2c:a1:2a:74:30:cd:78:
e8:90:c9:a5:5f:62:5c:ef:79:5d:29:21:06:ee:6e:
b6:16:91:74:af:e3:7e:3a:b2:fb:7d:1a:a3:ca:e4:
7f:41:a2:a8:36:b6:55:55:58:7e:d3:7e:3b:f2:24:
cc:bf:50:bd:cb:0f:47:d1:ba:bd:ac:0b:d1:75:19:
91:fa:97:38:5b:51:a3:5e:fc:9c:f1:3c:d3:da:12:
95:29:0a:9c:84:12:4a:f2:e0:4d:71:9f:de:06:77:
66:5e:a6:63:2a:ca:33:20:91:27:7f:dd:9b:b7:3b:
31:e4:55:be:68:0a:2c:aa:f6:5d:a3:4d:87:44:66:
78:b3:d8:b8:9a:79:8b:a9:7c:54:7c:31:c9:80:a2:
8a:62:f5:0f:53:8c:67:f2:47:57:53:6e:62:53:ce:
9e:18:2e:2f:24:a5:f7:67:14:bb:a1:18:bc:b8:06:
f2:ab:78:7a:ce:7c:7d:12:11:e8:8f:ac:51:aa:1b:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D6:0C:11:1B:FA:76:ED:E1:76:E7:4F:FF:86:E5:0D:14:1B:22:56
X509v3 Authority Key Identifier:
keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:63:b7:f3:54:47:47:2a:43:4f:28:90:f3:0e:14:a9:f2:24:
6b:08:1d:ed:30:fb:17:9c:42:16:f7:b5:0c:dc:76:51:1e:b3:
3e:61:45:7f:d7:7f:7a:08:7f:76:94:51:ec:44:a8:71:7b:97:
42:26:b8:72:58:46:f3:a1:41:c6:31:e8:b5:d9:69:a2:cb:99:
c4:25:c0:1a:c7:0e:4d:72:94:68:1c:c1:1a:36:c0:64:44:c9:
d3:75:fd:ae:bb:37:e2:50:1d:81:b7:59:e2:e0:0b:7b:cf:a5:
cb:28:16:05:3e:b0:f7:62:18:3f:3c:a8:1d:07:8f:78:d9:52:
f9:49:50:3e:21:ee:4a:3b:f2:79:27:f2:e5:bd:76:33:5b:13:
3f:69:6d:9e:e1:38:07:bc:38:92:93:ef:d7:2a:57:3d:16:4a:
00:c7:2e:72:8b:1e:d6:92:b3:13:b5:8b:74:bf:f8:5b:d8:20:
d2:b7:78:da:76:54:fd:18:c5:13:4f:25:04:40:96:97:74:88:
c8:58:3b:49:1e:41:e1:e2:70:54:6c:60:35:fa:9b:1e:6b:4e:
32:57:85:df:61:98:0a:98:6d:d9:be:f7:77:8a:81:b4:f4:5d:
48:f6:2a:cf:35:44:ac:9f:79:ed:e0:1d:5f:d7:04:6a:4b:06:
e9:61:0b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:02 2026 by rpki-client